System and Method for Online Identity Management

Abstract

Systems and methods for managing identity information which improves the experience of the HCPs when accessing services offered by the life science industry by delivering a single sign-on service over web portals of multiple different service providers (e.g., pharmaceutical companies). HCPs may register with an identity management system and be verified with an HCP data management system. Service providers may register their web portals with the identity management system. When an HCP wants to login to a service provider's web portal, the HCP's browser may be redirected to an URL owned by the identity management system and be authenticated by the identity management system.

What is claimed is: 
     
         1 . A computer-implemented method for managing online identity in an identity management system, the method comprising:
 enabling display of a user registration page on a first website in response to a request from the first website, wherein the first website is controlled by a first server, and is associated with the identity management system;   receiving identity registration information of a first user, wherein the identity registration information is for creating an identity for the first user in the identity management system;   creating a first identity record in the identity management system for the first user;   receiving identity verification information of the first user, wherein the identity verification information indicating if the first user is licensed in a geographic region;   comparing the identity verification information of the first user with data in a master data management system;   determining that there is a match in the master data management system for the identity verification information of the first user; and   verifying that the first user is licensed in the geographic region.   
     
     
         2 . The method of  claim 1 , wherein the identity verification information comprises medical license information. 
     
     
         3 . The method of  claim 1 , wherein the identity verification information comprises an address. 
     
     
         4 . The method of  claim 1 , further comprising: marking the identity record of the first user in the identity management system to indicate that the first user is medically licensed. 
     
     
         5 . The method of  claim 1 , wherein the master data management system stores the first user's business address. 
     
     
         6 . The method of  claim 1 , wherein the master data management system stores physician specialty information. 
     
     
         7 . The method of  claim 1 , wherein the master data management system stores health care organization information. 
     
     
         8 . The method of  claim 1 , wherein the master data management system stores de-duplicated data from at least two sources. 
     
     
         9 . The method of  claim 1 , wherein the master data management system stores verified health care provider (“HCP”) data. 
     
     
         10 . The method of  claim 1 , wherein the identity registration information comprises the first user's email address and login credentials. 
     
     
         11 . The method of  claim 1 , further comprising:
 receiving a login request from the first user from a second website run by a second service provider web server; and   authenticating the first user with data in the identity management system.   
     
     
         12 . The method of  claim 11 , wherein the identity management system and the second service provider web server communicate via a Security Assertion Markup Language (“SAML”) protocol when authenticating the first user. 
     
     
         13 . The method of  claim 12 , further comprising: redirecting the second website to a first URL designated by the identity management system. 
     
     
         14 . The method of  claim 12 , further comprising: sending a first authentication result from the identity management system to the second website. 
     
     
         15 . The method of  claim 11 , wherein the identity management system and the second service provider web server communicate via an OpenID Connect protocol when authenticating the first user. 
     
     
         16 . The method of  claim 15 , further comprising: redirecting the first user's browser to a second URL, and wherein the second URL comprises an authentication code. 
     
     
         17 . The method of  claim 15 , further comprising: sending an access token by the identity management system corresponding to the authentication code. 
     
     
         18 . The method of  claim 1 , further comprising: associating a primary key in a Customer Relationship Management system (“CRM”) with the identity record. 
     
     
         19 . The method of  claim 18 , further comprising: resolving the primary key with data from the identity management system. 
     
     
         20 . An identity management system, comprising:
 an identity data storage device for storing identity data; and   an identity management server for:
 enabling display of a user registration page on a first website in response to a request from the first website, wherein the first website is controlled by a first server, and is associated with the identity management system; 
 receiving identity registration information of the first user, wherein the identity registration information is for creating an identity for the first user in the identity management system; 
 creating a first identity for the first user; 
 storing the first identity as a first identity record in the identity data storage device; 
 receiving identity verification information of the first user, wherein the identity verification information indicating if the first user is licensed in a geographic region; 
 comparing the identity verification information of the first user with data in a master data management system; 
 determining that there is a match in the master data management system for the identity verification information of the first user; 
 verifying that the first user is licensed in the geographic region; and 
 authenticating the first user with data in the identity data storage device.